org.molgenis.app

Class WebAppSecurityConfig

java.lang.Object

org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

org.molgenis.security.MolgenisWebAppSecurityConfig

org.molgenis.app.WebAppSecurityConfig

All Implemented Interfaces:

org.springframework.security.config.annotation.SecurityConfigurer<javax.servlet.Filter,org.springframework.security.config.annotation.web.builders.WebSecurity>, org.springframework.security.config.annotation.web.WebSecurityConfigurer<org.springframework.security.config.annotation.web.builders.WebSecurity>

@Configuration
 @Import(value={org.springframework.security.acls.jdbc.AclConfig.class,org.molgenis.data.support.DataServiceImpl.class})
 @EnableWebSecurity
 @EnableGlobalMethodSecurity(prePostEnabled=true)
public class WebAppSecurityConfig
extends MolgenisWebAppSecurityConfig

Constructor Summary

Constructors

Constructor and Description
WebAppSecurityConfig(DataService dataService)

Method Summary

Modifier and Type	Method and Description
protected void	configureUrlAuthorization(org.springframework.security.config.annotation.web.configurers.ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry expressionInterceptUrlRegistry)
MolgenisAccessDecisionVoter	molgenisAccessDecisionVoter()
org.springframework.security.access.hierarchicalroles.RoleHierarchy	roleHierarchy()

Methods inherited from class org.molgenis.security.MolgenisWebAppSecurityConfig

anonymousAuthenticationProvider, anonymousAuthFilter, authenticationEntryPoint, authenticationManagerBean, authorizedClientService, changePasswordFilter, clientRegistrationRepository, configure, configure, configure, httpSessionEventPublisher, invalidSessionStrategy, localeResolver, oidcUserMapper, oidcUserService, passwordEncoder, recoveryAuthenticationProvider, redirectStrategy, roleHierarchyAuthoritiesMapper, roleHierarchyBean, roleVoter, runAsAuthenticationProvider, tokenAuthenticationFilter, tokenAuthenticationProvider, tokenService, twoFactorAuthenticationFilter, twoFactorAuthenticationProvider, userDetailsChecker, userDetailsService, userDetailsServiceBean

Methods inherited from class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

authenticationManager, getApplicationContext, getHttp, init, setApplicationContext, setAuthenticationConfiguration, setContentNegotationStrategy, setObjectPostProcessor, setTrustResolver

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

WebAppSecurityConfig

public WebAppSecurityConfig(DataService dataService)

Method Detail

configureUrlAuthorization

protected void configureUrlAuthorization(org.springframework.security.config.annotation.web.configurers.ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry expressionInterceptUrlRegistry)

Specified by:

configureUrlAuthorization in class MolgenisWebAppSecurityConfig

roleHierarchy

public org.springframework.security.access.hierarchicalroles.RoleHierarchy roleHierarchy()

Specified by:

roleHierarchy in class MolgenisWebAppSecurityConfig

molgenisAccessDecisionVoter

@Bean
public MolgenisAccessDecisionVoter molgenisAccessDecisionVoter()